Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/913e5edc-e114-4d0b-aec8-61686c406533.roa
File:                     913e5edc-e114-4d0b-aec8-61686c406533.roa (raw, json)
Hash identifier:          YkAcUpXfzmswXj/aMSlz87aMzkBUhjLiZsusQWUokg8=
Subject key identifier:   9C:34:10:ED:60:47:D5:B1:BC:05:05:65:AD:A2:C1:E7:27:98:B1:5C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5E4A846ABE795BF8AE139CE2FAFC849662A7DA31
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/913e5edc-e114-4d0b-aec8-61686c406533.roa
Signing time:             Mon 20 Oct 2025 05:20:52 +0000
ROA not before:           Mon 20 Oct 2025 05:20:52 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.159.80.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:4a:84:6a:be:79:5b:f8:ae:13:9c:e2:fa:fc:84:96:62:a7:da:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 05:20:52 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=80e791534de500af011f2f0c741d997458506d1bf5385dc43ec44e260f42caec, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:54:0f:1a:ff:ba:ed:02:ff:0a:ac:8c:e0:e1:
                    da:ab:cc:10:45:cd:3b:9a:fa:f8:36:9b:0f:30:d7:
                    7d:36:63:dc:ef:03:71:c0:cd:fe:30:46:8e:f4:65:
                    74:cc:42:1c:b8:82:8e:4c:e0:34:cc:c4:a0:cb:df:
                    15:18:e4:2d:f1:4c:28:9f:5f:97:0d:4a:ca:f0:05:
                    df:c8:21:64:60:0c:32:05:0e:1a:8a:82:d4:1a:e8:
                    75:2a:21:1a:bc:e3:bf:27:96:18:12:86:b1:36:49:
                    7f:18:cc:a6:bf:51:77:c6:da:ac:0b:4d:6b:cf:97:
                    15:bd:e1:c6:6b:4e:1a:82:38:00:59:c9:e8:f5:53:
                    4c:0e:6a:0b:2c:5f:8d:a7:07:ac:9c:7d:1c:03:87:
                    60:13:25:cb:55:f1:22:dc:a4:9e:48:5a:98:70:19:
                    34:80:54:fb:3c:be:68:92:3d:b6:f3:7d:bc:b4:46:
                    e7:77:9a:46:9f:a0:ee:37:76:4b:67:f9:4e:32:18:
                    1f:dd:46:d5:0b:20:ea:87:12:57:03:45:a5:85:00:
                    04:2b:c9:9c:66:2c:1b:a7:1b:6d:99:14:c5:f0:71:
                    0b:8f:e1:ec:60:6b:2c:85:50:c2:50:a9:bc:4a:bc:
                    b6:b8:80:40:d4:8e:35:67:3c:24:f7:5d:4b:3e:2e:
                    e1:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:34:10:ED:60:47:D5:B1:BC:05:05:65:AD:A2:C1:E7:27:98:B1:5C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/913e5edc-e114-4d0b-aec8-61686c406533.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.159.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:b6:3a:06:02:b3:20:f3:fc:06:3e:06:78:0b:35:a7:cd:72:
         b1:01:f2:49:44:dc:a8:9c:0f:8f:ce:6c:91:2a:83:17:93:3d:
         ce:40:e5:73:71:67:a7:83:f3:5b:b5:ad:ec:89:91:0a:ab:8d:
         6b:3b:8d:6b:f6:7c:d6:1d:e8:78:ac:51:ea:e6:bc:8f:bd:ba:
         c3:a8:74:bf:c9:41:52:72:db:1e:cd:5c:82:58:a9:be:ae:e8:
         1a:84:33:b0:4b:25:74:48:88:17:50:14:36:01:75:f6:30:f4:
         58:7b:39:c9:2d:c1:3c:22:ec:c1:2e:b7:58:14:58:a2:e3:b3:
         b9:00:0c:73:78:e5:da:b5:2c:f6:02:1a:ae:27:1c:57:2a:87:
         55:32:51:b8:ab:17:49:4b:ed:27:29:a3:94:0b:54:8d:3f:43:
         0f:50:ef:7b:fe:e2:50:5f:a2:8c:da:85:d7:09:e8:fd:3d:64:
         5c:94:a2:8a:61:2e:05:e0:c3:0b:d5:91:1f:0a:7f:79:1e:2c:
         56:31:ae:c1:6e:0d:a1:b1:68:fc:2d:e5:ff:e8:ce:2a:ec:74:
         cf:a3:1e:c8:f7:d3:2b:b7:20:74:ae:a8:a1:a2:80:22:ac:47:
         7c:6c:d6:e5:44:a7:a2:10:63:01:60:45:52:2c:ad:62:36:e1:
         9f:89:9c:4f
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUXkqEar55W/iuE5zi+vyElmKn2jEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDIwMDUyMDUyWhcNMjUxMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0A4MGU3OTE1MzRkZTUwMGFmMDExZjJmMGM3NDFkOTk3NDU4
NTA2ZDFiZjUzODVkYzQzZWM0NGUyNjBmNDJjYWVjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDAVA8a/7rtAv8KrIzg4dqrzBBFzTua+vg2mw8w1302Y9zv
A3HAzf4wRo70ZXTMQhy4go5M4DTMxKDL3xUY5C3xTCifX5cNSsrwBd/IIWRgDDIF
DhqKgtQa6HUqIRq8478nlhgShrE2SX8YzKa/UXfG2qwLTWvPlxW94cZrThqCOABZ
yej1U0wOagssX42nB6ycfRwDh2ATJctV8SLcpJ5IWphwGTSAVPs8vmiSPbbzfby0
Rud3mkafoO43dktn+U4yGB/dRtULIOqHElcDRaWFAAQryZxmLBunG22ZFMXwcQuP
4exgayyFUMJQqbxKvLa4gEDUjjVnPCT3XUs+LuHTAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUnDQQ7WBH1bG8BQVlraLB5yeYsVwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzkxM2U1ZWRjLWUxMTQtNGQwYi1hZWM4LTYxNjg2YzQwNjUzMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAJsn1AwDQYJKoZIhvcNAQELBQADggEBADi2OgYCsyDz/AY+BngLNafNcrEB
8klE3KicD4/ObJEqgxeTPc5A5XNxZ6eD81u1reyJkQqrjWs7jWv2fNYd6HisUerm
vI+9usOodL/JQVJy2x7NXIJYqb6u6BqEM7BLJXRIiBdQFDYBdfYw9Fh7OcktwTwi
7MEut1gUWKLjs7kADHN45dq1LPYCGq4nHFcqh1UyUbirF0lL7Scpo5QLVI0/Qw9Q
73v+4lBfoozahdcJ6P09ZFyUoophLgXgwwvVkR8Kf3keLFYxrsFuDaGxaPwt5f/o
zirsdM+jHsj30yu3IHSuqKGigCKsR3xs1uVEp6IQYwFgRVIsrWI24Z+JnE8=
-----END CERTIFICATE-----